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Abstract 

We show that there is a polynomial space algorithm that counts the number of perfect 
("^ . matchings in an n- vertex graph in 0*(2"'/^) C 0(1.415") time. (0*(/(n)) suppresses 

CSl ' functions polylogarithmic in /(n)).The previously fastest algorithms for the problem was 

the exponential space 0*(((1 + -\/5)/2)") C 0(1.619") time algorithm by Koivisto, and 
for polynomial space, the 0(1.942") time algorithm by Nederlof. Our new algorithm's 
runtime matches up to polynomial factors that of Ryser's 1963 algorithm for bipartite 
^^ ' graphs. We present our algorithm in the more general setting of computing the hafnian 

over an arbitrary ring, analogously to Ryser's algorithm for permanent computation. 
We also give a simple argument why the general exact set cover counting problem over 
r/^ . a slightly superpolynomial sized family of subsets of an n element ground set cannot be 

Q ' solved in 0*(2(^~'^i)") time for any ei > unless there are 0*(2(^~'^2)") time algorithms 

• . for computing an n x n 0/1 matrix permanent, for some £2 > depending only on t\. 

O 

1 Introduction 

\^ • The permanent of a matrix A = (Aij) G Ji^^^^ over a ring R is defined as 

^' 

^. : per(A)= ^ n^i.-W 

o. 

Here Sn is the set of all permutations on n elements. Ryser [T3] gave an algorithm for 
computing the permanent in 0(n2") operations over R, and it remains to this date the fastest 
known for general matrices. Only in special cases as e.g. when the input matrix is sparse 
^ . significantly faster algorithms are known. In this paper we show that a previously studied, 

H \ seemingly harder, problem admits just as fast an algorithm up to polynomial factors. It 

includes the permanent computation as a special case: The hafnian of a matrix B = {Bij) G 
j^2nx2n ^^^^ ^^ j^j^^g j^ jg comixLonly defined as 

n 

haf(i?) = 2^ ]__[-B^(2J-i),<T{2i) 

Here C2n is the set of canonical permutations on 2n elements, permutations a obeying I. 
Vi : (t(2z — 1) < a{2i) and II. Vi : a(2i — 1) < cr{2i + 1). Observe that hafnians only depend on 
matrix elements strictly above the main diagonal. For conventional reasons though, a hafnian 
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is defined only for zero diagonal symmetric matrices. A simple connection between hafnians 
and permanents is given by 

"0 A 
A^ 



haf 



per(^) 



We show that 2n x 2n hafnians can be computed as fast as Ryser's algorithm computes 
n X n permanents. 

Theorem 1 For B G ^2nx2n ^ symmetric zero diagonal matrix with elements from a ring 
R, haf(i?) can he computed in 0*(2") ring operations, storing only a polynomial in n number 
of ring elements at any instance of the computation. 

Computing the permanent of an n x n 0/1 matrix has an equivalent formulation in terms 
of counting perfect matchings in an associated bipartite graph on 2n vertices. Just identify 
rows with one half of the vertices and the columns with the other. There is an edge between 
row vertex r and column vertex c if the matrix entry at r, c is 1. Analogously, computing the 
hafnian of a 2n x 2n 0/1 matrix has an equivalent formulation in terms of counting perfect 
matchings in an associated general graph on 2n vertices. Think of the matrix as an adjacency 
matrix for a graph. Thus with our new algorithm we can count perfect matchings in general 
graphs just as fast as Ryser's algorithm counts them in bipartite ones. 

Corollary 2 There is a polynomial space, 0*(2"'^) time algorithm that computes the number 
of perfect matchings in any n-vertex graph. 

In other words, either bipartiteness doesn't help much for perfect matching counting, or 
Ryser's algorithm is far from optimal. This should be contrasted with the problems' known 
approximability situation: There are polynomial time approximation schemes for counting 
perfect matchings in bipartite graphs [S], but the fastest approximation schemes for general 
ones still run in time singly exponential in the number of vertices [15] . 

We note that the technique used in our algorithm makes profound use of the fact that it 
counts covers of 2-sets. One would hope that the technique could bear fruit even for larger 
set families. Unfortunately it seems like it doesn't. We give here some evidence to why this 
may be. In a general exact set cover counting problem, we are given a family J^ of subsets of 
arbitrary size of a ground set U on n elements. The objective is to count the number of ways 
to pick pairwise disjoint subsets from J^ whose union cover all of U. This is known to admit an 
0*(2") time algorithm [4j (and a trivial 0*(|J-"|2") time algorithm by dynamic programming 
across all vertex subsets). We prove here that if the fastest known permanent computation 
algorithms for 0/1 matrices are close to optimal, then we cannot hope to improve on general 
exact set cover counting. 

Theorem 3 For every constant ei > 0, any algorithm capable of counting the solutions to 
any exact set cover instance T,U,\U\ = n, \J-\ E n^i^^s^) in 0*{2^^~'^^>'^) time, implies the 
existence of an algorithm that computes the permanent of any nxn 0/1 matrix in O* {2^^~'''^'"') 
time, for some £2 > depending only on ei. 

1.1 Previous Work 

Computing the Permanent. 

Ryser [14j presented an inclusion-exclusion based algorithm to evaluate the permanent of an 
nxn matrix over any ring in 0(n2") ring operations. Valiant [17J showed that computing 



the permanent even restricted to elements of non-negative integers is ^^P-hard. Dell et al. [6] 
concluded in the same spirit that one cannot compute n xn integer permanents in 2°("'-' time 
unless you can count the satisfiying assignments to 3CNF Boolean n-variate formulas faster 
than 0(c") for every c > 1 (I.e. a counting analogue of the Exponential Time Hypothesis [7\). 
There is however no known explanation as to why the exponential base 2 should be optimal. 
For restricted cases, there are some small improvements. Bax and Franklin [2j showed 
that for 0/1 matrices, there is an exp[—{n^'^/2ln{n))]2'^ expected time algorithm. Building 
on their construction, Servedio and Wan |16j gave an algorithm that computes the permanent 
of any matrix with at most en nonzero entries in 0*((2 — e)") time, with e depending on c. 

Counting Perfect Matchings in General Graphs. 

Bjorklund and Husfeldt |3j gave a polynomial space algorithm that counts the perfect match- 
ings in an n-vertex graph in 0(n^2") time. They also presented an exponential space 
0(1.733"') time algorithm based on fast matrix multiplication. Koivisto jlUj showed an elegant 
exponential space O*(0"') time algorithm where (/) = (1 + v5)/2 ~ 1.618 is the golden ratio. A 
generalization of Ryser's formula to general graphs was given independently by Nederlof|12]. 
and Amini et al. ^, who showed that if the graph has an independent set of size i, one can 
count the perfect matchings in 0(n^2"~*) time. In a yet unpublished paper Nederlof |13j 
further improves the polynomial space running time to 0(1.942"). 

1.2 Overview. 

The remainder of the paper is organized as follows. In Section [2] we try to explain the idea 
behind the algorithm. A formal proof in the hafnian setting is given in Section [3l where the 
proofs of Theorem [1] and indirectly Corollary [2] are given. Finally, In Section H] we give the 
proof of Theorem [3l 

2 Our Algorithmic Idea 

We will in the next section describe our new algorithm in detail. First we will try to provide 
some intuition. The underlying idea of the algorithm is perhaps best envisioned in the perfect 
matching setting. Consider an undirected unweighted graph and suppose you want to count 
its perfect matchings. Our algorithm operates in stages. In each stage we remove two vertices 
from the graph and replace them with new "labeled" edges between the remaining vertices. 
The added labeled edges represent ways a partial matching can cover the removed vertices. 
In particular, the partial matching always cover both of the removed vertices and thus they 
can be treated as just one label, we never consider a partial matching covering only one 
of them. The effective speedup is achieved exactly by this fact, that we always trade two 
vertices for one new label. Confer Figure [T] for an example of three subsequent invocations 
of this remove-and-replace operation. As the operation is repeated it results intermediately 
in multilabeled edges. When the graph's vertices are exhausted, all that is left is a set of 
multilabeled "empty" edges. Their disjoint label covering combinations describe all perfect 
matchings of the original graph. This is an exact set cover counting problem on half of the 
vertices number of labels. In Figure [U all ways to combine the partial matchings listed under 
"0 :" in stage 3 such that each of the three labels 1,2,3 is used precisely once, represents a 
perfect matching in the original graph in stage 0. E.g. e/[l], adL)bc[23] is the perfect matching 



efUadUbc, and ceU(i/[12], a6[3] is the perfect matching ceUdfUab. Moreover, every perfect 
matching in the original graph can be written as an exact set cover from the hst in this way. 
In the next section we will see how this idea is formalized in the general hafnian setting. 
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Figure 1: Vertices are removed in pairs and are replaced by labels, first vertices e, / for the 
label 1, then c, d for 2, and finally a, b for 3. Labeled edges including empty edges listed under 
"0 :", representing partial matchings of the removed vertices, are created. The labels are 
written within brackets. In the final stage, the partial matchings listed under "0 :" constitute 
an exact set cover problem for which the solutions are precisely the perfect matchings in the 
original graph. 



3 An Algorithm for the Hafnian 

In this section we prove Theorem [TJ We describe an algorithm to compute haf(i?) of a matrix 
B G E?'^^'^^ for an arbitrary ring R. First we suggest an implementation of our algorithm 



that uses exponential space since it is easier to reason about, but we will see in Section [33 
how the space usage can be reduced to only polynomial in n. 



3.1 Label Extensions of a Ring. 

We will operate over extension rings of R. They are designed to keep track of the multilabeled 
elements mentioned in the previous section. The reason will hopefully become clear in Sec- 
tion 13.31 where we prove a syntactically tight recursion formula for the hafnian in terms of the 
extension ring. We call the extension rings R\Um\ for m a non-negative integer. One can think 
of the structure Um as the set of subsets of [rri\ , with a partial function yJdisj '■ [m] x [m] — t- [m] 
defined as Urfjsj(a, 6) = a U 6 for disjoint a, b and undefined otherwise. 

An element in R\Um\ is nothing more than a vector r G R^^\ i.e. a vector of 2*" elements 
from R. For an element r G R\Um\, we write rx to denote the coordinate in r associated with 
the subset X. Syntactically, we write 



E ^^[^] 



XC[m] 



to describe the ring extension element r. Addition oi r,q £ R[Um] is given by 

r + q= Yl i'^x + qx)[X] 

XC[m] 

Here the + within the parantheses refers to addition of elements in R, i.e. the vectors r 
and q are added elementwise. Multiplication is a bit more complicated. It is defined in a 
convolution like manner by 

'^■^^ Z] *^X] rYqx~Y)[X] 

XC[m] YCX 

Again, operations within the parantheses are over the ring R. We write 1[0] to emphasize 
the multiplicative identity. Note that R[Ui] is a subring of -R[C/j+i] for every i, i.e. operations 
over R[Ui] are meaningful also in R[Ui-^.i]. We will use this fact extensively. 

3.2 Algorithm. 

Suppose we want to compute haf(i?) for B G ij2nx2n_ q^^. algorithm operates in stages. 
Initially, we set B^^' = B. In each subsequent stage i, we will reduce the hafnian computation 
of a matrix B^^~^' to one for a matrix B^^' . We call this operation a squeeze, because the 
latter matrix's dimensions will be smaller, but its elements belong to a larger ring than its 
predecessor's. Formally, in stage i the hafnian of a matrix B^^~^^ G j^^jj._^j{2n-2i+2)x(2n-2t+2) 
is related to the hafnian of a derived matrix B^^^ G j^^jj.-j{2n-2i)x(2n-2i) ^ ^^ ^^^ ^^^^^ stage n, 
we are left with a hafnian of a zero-dimensional matrix which we by definition equate with 
one. We also associate an element 13^^' G R[Ui\ with stage i called the squeeze factor of the 
stage. Our algorithm simply computes the product of these squeeze factors and in the end 
returns the element associated with the label set [n] , confer Algorithm [TJ 

Algorithm 1 haf {B),B G R 

5(0) ^ B 

h ^ 1[0] 

for i = 1,2, • • • n do 

Compute i?(*) and /?(*) (according to Section [3. 2. ip . 

h^h- /3(*) 
end for 
return /i[„i 



2nx2n 



3.2.1 The Squeeze Operation. 

In every stage we will expunge the two first rows and columns from the present input matrix 
and instead append a new element (a label) to the set of the ring extension. Consider stage 

i. On input S(^-l) G i?[[/._^]{2n-2i+2)x(2n-2i+2) ^^ ^^^^^ ^(i) ^ j^p.i^{2n^2i)x{2n~2i) through 

^j+2,k+2 + ^iJ,k ■ J ¥" k 

: j = k 




where 

The squeeze factor of the stage is defined by 

/3« = i[0] + i[W]-i3i;-^) 

3.3 Correctness Analysis. 

The essence of our algorithm is captured in the following lemma: 
Lemma 4 For every subset X C [i — 1] 

(haf(i3(*-i)))x = (/3«-haf(i?«))|,}ux 
for all i > 1. 

Proof Recall that B(*-i) G i?[C/i_i]™^'^ with m = 2n-2i + 2. By definition of the hafnian 

m/2 

haf(B"-") = E n Bi'Si.,,.,^., (1) 

First consider the case i = n separately. The above formula yields haf(i?*-"'~"'^'') = i?}'^ . We 
can write this as 

(haf(i?("-^)))0 = ((1[0] + l[{n}] • i?J7^)) • haf(s("))){i} 

since haf(i3*-"')) = 1 by definition. Identifying the right hand side parantheses expression as 
fi^"^', it follows that the lemma is true for i = n. 

Next consider the case i < n. First observe that for every a € Cm, we always have 
(t(1) = 1 and either a{2) = 2 or a{3) = 2. We separate these two cases in Eq[T} 

m/2 m/2 

<T&C'm j = 2 O-eCm j=3 

o-(2)=2 cr(3)=2 



■• >s. 



Tl T2 

Second we note that the first term Tl of the right hand side above for every X Q [i — 1] 

I m/2-l 

Third we see that the second term T2 of the right hand side for every X C [i — 1] 

m/2-l 



^2x = I E n <.-i),.(2,) 



,<tgc„_2 i-1 / |.}Ljx 



Putting the two together we get 

/ m/2-l 

(haf(i?(-i)))^ = ((i[0]+i[w]-<-^vj: n<.-i),.(2,) 

By the definition of the hafnian and the stretch factor, the Lemma fohows. | 

Note that haf(i?) = (haf(i?''*''*))0. Recursive application of LemmaH]up to haf(i?^"'^) = 1 (since 
B^^' is zero-dimensional), shows that haf(i?) = (nr=i/^ )W' which is what Algorithm [1] 
computes. 

3.4 Runtime Analysis. 

It is straightforward to note that adding two elements in R\Um\ can be done in 2^" additions 
over R. Multiplication of two elements a,b £ R[Um] can be computed in m?2'^ additions and 
multiplications over R using fast subset convolution [5]. We describe its components here 
anew for completeness. 

First, we introduce a polynomial over i? in a symbolic rank variable r, and compute the 
ranked zeta transforms 



ax{r) = ^ ayr^^K bx{r) = '^ by 



rlY] 



YCX YCX 

Second, we compute the elementwise products 

cxir) = ax{r)hx{r) 

Third, we take the ranked Mobius inversion. Here [r^]p{r) for a polynomial p{r) refers to the 
coefficient of the monomial r™ in p{r): 



dx = [rl^l] Y. (-ir^'^^'cxl^ 



YCX 

This d is the product. The proof is implicit in Lemma [5] in the next section, where we show 
how to make the whole algorithm use only polynomial space. For now, since both the zeta 
transform and the Mobius inversion can be computed in 0(m2™) ring operations by Yates's 
algorithm |18j . the runtime bound for multiplication follows. 

Now confer Algorithm [TJ In stage i, we compute B^"^' using at most 0((2n — 2i)^) multi- 
plications and additions of R\Ui\ elements. The total runtime in terms of ring operations over 
R of computing all the Sj's is YJl=iO{{2n - 2if)0{i^2') C 0*(2"). Moreover, multiplying 
all the squeeze factors together is Yl^=iO{i'^2^) C 0*(2") ring operations on R. Altogether, 
an 0*(2"') ring operations algorithm as claimed. 

3.5 Polynomial Space. 

Explicitly holding a ring element of R[Um] requires storing up to 2™ elements of R. We 
describe in this section how the algorithm can be implemented to only hold a polynomial in 
n number of elements of R at any instant in time. The idea goes back at least to Karp [S] 
who showed how some dynamic programming recurrences across subsets could be replaced 



by an inclusion-exclusion formula. The technique was recently formalized by Lokshtanov and 
Nederlof [TT]. We describe it here for our algorithm in particular for completeness. 

First we note that Algorithm [1] can be viewed as an evaluation of an arithmetic circuit 
over R\Uri\. We never do anything else intermediately with an element of i?[C/m] anywhere in 
the algorithm except for addition or multiplication with another element. Only at the very 
end we ask for the element of h corresponding to [n]. 

One way of looking at the technique, is to consider the ranked zeta transforms of the 
previously section, and count in the transformed domain " all-the-way" . We don't transform 
back and forth every time we need to multiply two ring elements of R\Uri\^ instead we stay 
in the ranked zeta transformed representation during the whole algorithm. In the end we 
transform back via an inclusion-exclusion formula, since we are only interested in the element 
for [n]. Let us again recall the ranked zeta transform. For e € R\Uri\ associate for every subset 
X C [n] a polynomial in a symbolic rank variable r 



ex{r) = ^ eyr 



vzx 



The beauty of this relation is that both additions and multiplications over i?[t/„] now can 
be treated as elementwise operations. This is well known, see for instance [5J. The case 
of addition is straightforward from the definition, i.e. since (e + f)x = ex + fx we have 
e + fx = cx + /x from linearity. For multiplication we have 

Lemma 5 ([5j) For any ei, 62, . . . , e^ E R[Un] 

k 

(ei-e2---e,)[„] = n J] (_i)-W(ei .-^T^. efc)^(r) = [r"] ^ (-l)-W J]e.x(r) 

XC[n] XC[n] i=l 

Proof We recall from the definition of multiplication for the first (left) expression that 

k 

iei-e2---ek)[n]= Yl Yl^iYi 

YiUY2U-UYk=[n]i=l 
Vi<j:Y,nYj=<l) 

For the middle expression, we only have to plug in the definition of the ranked zeta transform 
to arrive at the same value 

XC[n] XC[n] YiU---UYfe=X i=l YiU---UYfe = [n] i=l 

yi<j:YinYj=(l) Vi<i;Y,nY,=0 

Finally, for the right expression 

n E ("ir"'' ne.x(r) = n e (-ir'^'dl E -^^^^''^'') = E U^^y^ 

XC[n] i=l XC[n] i=lY,CX YiUY2U---UYk = ln]i=l 

Vi<j:Y,nYj=d 

where the last expression follows after collecting all terms contributing to the coefficient of 
r", and noting that contributions for y^'s such that {J^Yi C [n] are counted equally many 
times with the sign + as — (since a nonempty set has as many even sized subsets as odd sized 
ones) . I 



Via Lemma [5] and the linearity of addition, we see that the quantity Algorithm [T] outputs, 
{/3^^' ■ P^^' • • • /3^"''')fni) can be computed elementwise in the transformed domain. Thus we can 
lift out the summation across the subsets to the outermost level. Every arithmetic operation 
can be carried out in the transformed domain over a degree n polynomial in R[r\, module 
^n+i g^j^(,g ^Q only care about the coefficient of r^. Our new polynomial space algorithm is 
given in Algorithm [2j Here, the matrices B^"^' G ^jj^j(2ra-22)x(2n-2i)^ ^^^ ^.j^g squeeze factors 
fi^"^' G R[r] are transformed analogues of B^'^' and /3'*^ from Algorithm [TJ Note that the 
increase in runtime is at most polynomial in n. 



Algorithm 2 haf(S),5 G H 



2nx2n 



m ^ B 

for X C [n] do 

for i = 1 ■ ■ ■ n do 
if i G X then 

^j,k - ^\^l,j+2^2,k+2 + ^l,k+2^2,j+2) + ^j+2,k+2 ■ J 7^ «^) "^ • J " «^- 

/3(0 = 1 + rB^I~^^ 
else 

3,k ~ ^j+2,k+2 

/3(*) = 1 
end if 
g ^ 5/3(^) 
end for 

h^ /i+(-l)"-|^l[r"]c/ 
end for 
return h 



4 The Hardness of General Exact Set Cover Counting 

In this section we prove Theorem [3j A general exact set cover problem consists of a ground 
set U on n elements, and a family J^ of subsets of U. The objective is to find a subset T' '^ T 
such that I) Ufgjt'F = \J and II) VF 7^ G G J"' : F n G = 0. In the counting analogue we 
are asked to count the number of such covers. This extends the problem of counting perfect 
matchings in a graph G = (V, E) since U = V and T = E is a. valid instance. One might 
suspect that the algorithm presented in this paper after some careful tailoring would improve 
the runtime of general exact set cover counting. Unfortunately this seems not to be the case, 
at least not significantly. We show here that if it did, we would have faster algorithms for the 
0/1 matrix permanent. 

Let ei > be a fixed constant less than one. For large enough integers fc, n we can have 
n chosen as the largest integer smaller than 2^^''^^''^~^'^ for which k divides n. Note that for 
such values A; > ej~ (2[log2 n\ +2). Let M G {0, 1}"^" be a matrix whose permanent we want 
to compute. First note that the permanent of M is a positive integer at most equal to n\. We 
will use the Chinese remainder theorem to recover the value of the permanent. We compute 
Oj = per(M)(mod rrii) for n pairwise coprime moduli m,j < n^. The prime number theorem 



asserts that we can find such a set of moduli for large enough n. Just take rrii as the smallest 
power larger than n of the i:th prime. 

We show how to construct counting exact set cover instances Xj = (U,J-i) for each rrii, 
whose solution equals ai(mod nii). We start by dividing the rows of M into m groups 
Ri,R2,--- ,Rm of the same size k. We will add sets to J-^ for each such group so that 
in every exact set cover, exactly one set from each group is present. To this end, we associate 
a set Li for each group Ri, which will all be part of the ground set U. Each Li has size 
2 [log2 n] + 2 < ei A;. We let I j^ r £ Li be two of its elements. The subsets of Li containing ex- 
actly one of / or r, are divided in two families Ci and TZi as follows. Every subset T C Li — {r} 
such that I G T belongs to Ci, and every subset T O Li — {1} such that r £ T belongs to TZi. 
Note that for any two disjoint Ti,T2 G £« U TZi such that Ti U T2 = Li, one of them belong to 
Ci and the other to TZi. Also note that Ci has at least n^ > mi members. 

The construction is as follows. We set U = [n]L) LiU ■ ■ -ULfc. Note that \U\ < n + ein. Let 
tik denote the family of all /c-sized subsets of [n] . For every subset T gUj. and j we compute 

k 
cCS'fe 1=1 

Here and in the following T(l) for a set T refers to the Ith. member of the set. We let J^i 
contain the sets T U Cj{l),T U Cj{2), • • • , T U Cj{wj{T)) for every T £ Uk and every j. We 
also add all sets in TZj for all j to J-^. Note that \J-i\ G 0(|f7|^°sl^l). This completes the 
construction. 

Lemma 6 The solution to Xj modulo rrii equals Oj. 

Proof By definition 

n 

per(M)= Y, n^^'-« 
Identifying the m row groups the relation can be rewritten 

m k 

per(M)= Y. nEn^(^^«'^:'(^«)) 

Va;T„eWfe 

Substituting w into the formula we have 



per(M) = Y Ylwj{Tj) {mod 



nii 



TiUT2U---UTm = [n]j=l 

From the other direction, note that every exact set cover T' C Ti contains exactly 2m sets, 
one set from each TZj , and for every j there is a set which is the union of a set T from Uj^ and 
one of the first Wj(T) sets in Cj. Let Cj[l] be shorthand for the first I sets in Cj, i.e. the sets 
Cj{l),Cj{2), • • • ,Cj(l). We have that the solution to Xj equals 



E 



VlUWlUV2UW2-UW2m = U 

Vj:VjnLj&Cj[wj(Vjn[n])] 

yj:Vjn[n]GUk 



10 



Since the Wj^s are uniquely determined by the K's, it can be rewritten as 



m 



E 1= E \{n^ATj){^od 



rrii 



ViUV2U-uVm=u Tiu-ur^=[n]i=i 

Vj:V,nLj e-Cj K (V,n[n])] W-.TaGU,, 
Vj:Vjn[n]eUk 

This is the same expression as the right hand side of Eq. [2j | 

We set €2 = ef. It takes 0(m(^)A;!) time to construct each Xj naively from M. For our 
choice of k, this is (much) less than 0*(2'^~'^2)"^ for large enough n. Now if we had an 
Q*^2(i-'^i)" ) time algorithm to solve an exact set cover counting problem on an n' element 
ground set, we could solve Xj for all i = 1, 2, • • • ,n and hence compute per(M) from the a^'s 
using the Chinese remainder theorem in 0*{2^^~'''^)^) = 0*{2^^~'^^)^) time, since n' = \U\ = 
(1 + ei)n. This completes the proof of Theorem [3l 
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